Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3132382e302f32302d3230203d3e20323632393733.roa
File:                     3137392e3130382e3132382e302f32302d3230203d3e20323632393733.roa (raw, json)
Hash identifier:          QZhdqeXqM662XlEc5sOv3u43pO8QzDvpZa1cSySErtQ=
Subject key identifier:   0B:CD:98:83:26:A3:2E:0F:54:84:47:2F:92:47:B5:ED:B2:83:6F:5D
Certificate issuer:       /CN=3F0A24B57BACAABBC275767A9FE0AA49C3189C59
Certificate serial:       1F5E795A2B35F77E942A22762F9D25925EA47079
Authority key identifier: 3F:0A:24:B5:7B:AC:AA:BB:C2:75:76:7A:9F:E0:AA:49:C3:18:9C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F0A24B57BACAABBC275767A9FE0AA49C3189C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3132382e302f32302d3230203d3e20323632393733.roa
Signing time:             Thu 18 Aug 2022 11:16:32 +0000
ROA not before:           Thu 18 Aug 2022 11:11:32 +0000
ROA not after:            Thu 17 Aug 2023 11:16:32 +0000
asID:                     262973
IP address blocks:        179.108.128.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5e:79:5a:2b:35:f7:7e:94:2a:22:76:2f:9d:25:92:5e:a4:70:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0A24B57BACAABBC275767A9FE0AA49C3189C59
        Validity
            Not Before: Aug 18 11:11:32 2022 GMT
            Not After : Aug 17 11:16:32 2023 GMT
        Subject: CN=0BCD988326A32E0F5484472F9247B5EDB2836F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:de:ef:77:87:b2:5b:95:51:c0:98:01:57:
                    bc:1a:53:68:a6:54:c0:cb:71:6d:55:61:5d:30:ce:
                    74:7f:1b:a8:16:45:df:c3:9d:b7:54:72:08:22:2b:
                    c7:61:c7:16:d9:f5:19:d4:83:1d:7e:9a:85:5e:c3:
                    38:fb:08:e7:ca:a6:2a:d2:2a:98:c6:c8:a3:2e:5e:
                    72:37:3d:89:eb:e2:be:bc:ae:5f:41:71:8e:17:65:
                    ae:42:a2:b0:32:ba:67:0e:19:33:47:50:c0:7f:d3:
                    19:d3:19:84:1d:b6:8f:82:65:f2:d8:20:54:7d:20:
                    f6:08:c5:e0:9b:fb:91:75:09:ec:59:12:5e:86:17:
                    bc:90:d1:36:df:e4:78:6d:be:12:04:d6:fa:c4:85:
                    a2:a3:95:ea:d6:2d:96:a1:fb:a6:c7:0f:ea:8c:c3:
                    b9:22:58:f5:2b:a0:c7:81:5d:ca:e7:8d:f9:71:9b:
                    4d:da:8e:c9:e9:ec:0f:9e:99:65:3f:78:b4:3d:92:
                    b4:6f:c1:91:1a:4d:1c:b7:54:03:18:a5:1b:bd:9b:
                    e5:ed:74:51:77:5a:18:2e:95:f4:f2:f4:2d:05:a6:
                    af:e3:33:54:4d:fa:bd:38:36:5a:80:40:5d:c3:ea:
                    9f:e7:55:21:4e:76:8c:85:bc:91:7c:6b:97:5f:04:
                    93:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CD:98:83:26:A3:2E:0F:54:84:47:2F:92:47:B5:ED:B2:83:6F:5D
            X509v3 Authority Key Identifier:
                keyid:3F:0A:24:B5:7B:AC:AA:BB:C2:75:76:7A:9F:E0:AA:49:C3:18:9C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3F0A24B57BACAABBC275767A9FE0AA49C3189C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F0A24B57BACAABBC275767A9FE0AA49C3189C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3132382e302f32302d3230203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:01:f6:6c:c1:ab:b9:f9:13:cd:2b:66:34:88:72:6a:ba:db:
         dc:17:dc:05:82:33:e9:24:eb:8e:3d:3a:83:61:51:27:39:a4:
         a3:3b:26:ae:d6:77:ca:83:51:db:33:df:3f:17:54:13:b3:32:
         19:0b:f2:d2:ae:50:26:7e:44:9e:60:08:9a:6f:53:fb:e7:14:
         8c:64:6b:fb:48:ee:fd:c8:52:fb:1e:c8:b7:63:b0:91:83:85:
         5b:b9:0c:39:7f:fd:39:92:b2:db:4e:1b:35:20:49:0c:9f:cb:
         d9:01:5b:65:77:71:4b:82:a7:89:41:0d:57:fe:bf:27:99:04:
         08:06:c0:80:8c:88:af:d2:af:c3:04:a1:90:bc:6e:45:6a:9d:
         d3:35:27:1e:a7:e2:96:df:dd:dc:b6:f2:95:5a:cc:3c:01:53:
         89:e5:6b:49:6a:b6:9a:c8:c0:da:5d:98:5d:ba:7e:3b:c5:d8:
         a5:a8:c7:85:ba:91:88:01:df:b7:01:38:7b:96:56:42:3d:4a:
         dc:29:17:d0:50:00:ee:06:cf:9c:59:49:be:73:e5:b3:1d:c8:
         96:91:70:c3:ab:b8:70:b3:95:42:fa:76:c3:5a:41:3c:2a:2a:
         2f:65:ae:82:6e:87:67:98:40:ac:c6:1e:96:6b:c5:65:57:47:
         e5:8f:5b:34
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUH155Wis1936UKiJ2L50lkl6kcHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YwQTI0QjU3QkFDQUFCQkMyNzU3NjdBOUZFMEFBNDlD
MzE4OUM1OTAeFw0yMjA4MTgxMTExMzJaFw0yMzA4MTcxMTE2MzJaMDMxMTAvBgNV
BAMTKDBCQ0Q5ODgzMjZBMzJFMEY1NDg0NDcyRjkyNDdCNUVEQjI4MzZGNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQud7vd4eyW5VRwJgBV7waU2im
VMDLcW1VYV0wznR/G6gWRd/DnbdUcggiK8dhxxbZ9RnUgx1+moVewzj7COfKpirS
KpjGyKMuXnI3PYnr4r68rl9BcY4XZa5CorAyumcOGTNHUMB/0xnTGYQdto+CZfLY
IFR9IPYIxeCb+5F1CexZEl6GF7yQ0Tbf5HhtvhIE1vrEhaKjlerWLZah+6bHD+qM
w7kiWPUroMeBXcrnjflxm03ajsnp7A+emWU/eLQ9krRvwZEaTRy3VAMYpRu9m+Xt
dFF3WhgulfTy9C0Fpq/jM1RN+r04NlqAQF3D6p/nVSFOdoyFvJF8a5dfBJNPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUC82YgyajLg9UhEcvkke17bKDb10wHwYDVR0j
BBgwFoAUPwoktXusqrvCdXZ6n+CqScMYnFkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVNwcDVUZlNUSHN2SGh6Nm90dkg1WnZZMXlpTk1qWGZQd3F4aXFURFlD
Tm0vMC8zRjBBMjRCNTdCQUNBQUJCQzI3NTc2N0E5RkUwQUE0OUMzMTg5QzU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGMEEyNEI1N0JBQ0FBQkJD
Mjc1NzY3QTlGRTBBQTQ5QzMxODlDNTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VTcHA1VGZTVEhzdkhoejZvdHZINVp2WTF5aU5NalhmUHdxeGlxVERZQ05tLzAv
MzEzNzM5MmUzMTMwMzgyZTMxMzIzODJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMy
MzYzMjM5MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLNsgDANBgkqhkiG9w0BAQsFAAOCAQEANgH2
bMGrufkTzStmNIhyarrb3BfcBYIz6STrjj06g2FRJzmkozsmrtZ3yoNR2zPfPxdU
E7MyGQvy0q5QJn5EnmAImm9T++cUjGRr+0ju/chS+x7It2OwkYOFW7kMOX/9OZKy
204bNSBJDJ/L2QFbZXdxS4KniUENV/6/J5kECAbAgIyIr9KvwwShkLxuRWqd0zUn
Hqfilt/d3LbylVrMPAFTieVrSWq2msjA2l2YXbp+O8XYpajHhbqRiAHftwE4e5ZW
Qj1K3CkX0FAA7gbPnFlJvnPlsx3IlpFww6u4cLOVQvp2w1pBPCoqL2Wugm6HZ5hA
rMYelmvFZVdH5Y9bNA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org